Netcrook
16 June 2026
SMS Lures Wear a Public-Service Mask in Italy
A phishing wave themed around SEND and pagoPA shows how attackers can turn trusted civic branding into a believable trap.
How a Chat Thread Became Evidence: The Telegram Exam-Leak Puzzle
India's temporary block on Telegram highlights a familiar security problem: digital content can be staged to look like proof, even when the timeline is the real target.
Fake Gmail Panels Put Passwords and One-Time Codes in the Same Trap
A phishing operation attributed to Ghostwriter, also tracked as UNC1151, shows how attackers can turn a normal sign-in flow into a credential-grab that reaches beyond the password field.
When the Login Page Is Real: The Quiet Power of Device Code Phishing
A phishing campaign aimed at Microsoft 365 users shows how attackers can abuse a legitimate OAuth flow instead of building a fake login page.
A Gmail Phish That Hunts for the Second Factor, Not Just the Password
A reported UNC1151 Ghostwriter campaign puts a familiar weak point back under the microscope: code-based 2FA can still be trapped by a convincing fake login flow.
The Quarry Effect: How Government Impersonation Turns Phishing Into a Service Business
A reported phishing platform tied to IRS and SSA lures shows how social engineering is being industrialized, one rented campaign at a time.
The Tax Trap Became a Service: How Quarry Turns Phishing Into an Affiliate Machine
A modular phishing platform is being used to push IRS and Social Security lures at scale, showing how government impersonation can be industrialized for dozens or hundreds of operators.